
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa
File: 9CE4C21A529D11F18D46C3C192833773.roa (raw, json)
Hash identifier: kX8m+nWcUbQ9J0nvLbCc5JsNCCExflB9wLpG2VcDqXc=
Subject key identifier: FB:65:56:FD:1C:87:C0:0F:AD:06:5A:49:C5:D2:AB:D6:88:FE:39:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EAFF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa
Signing time: Sun 31 May 2026 17:48:37 +0000
ROA not before: Sun 31 May 2026 17:48:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 154680
IP address blocks: 2402:5ea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60159 (0xeaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:48:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7474-de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:c0:97:e1:53:a4:57:86:19:35:cc:76:af:
66:da:93:8d:c8:0a:b5:9f:ed:cd:26:4f:6e:2f:30:
ce:b4:21:30:4c:80:a6:54:0f:76:49:fd:ab:3f:62:
ef:ab:02:09:f8:d6:f8:ba:cf:5b:b6:ac:41:3a:0f:
5b:00:ce:af:17:e4:34:bb:3a:a2:73:0c:86:72:d1:
96:fd:6e:ff:00:3b:49:d4:35:ac:f0:fe:ab:ba:0c:
42:54:fb:59:26:5f:84:6b:09:7f:55:ae:8d:00:82:
9e:64:7a:69:01:c7:ae:b7:4b:a3:3f:82:43:bc:26:
80:d0:95:5d:2a:d2:30:7c:4e:52:41:96:fd:72:35:
45:e5:61:e2:33:ca:4d:f4:d1:5c:10:ba:ad:d1:d4:
f2:0e:94:d0:e2:b3:ce:14:46:fc:5d:9b:bf:82:23:
f2:c7:08:83:9f:66:d3:37:32:b5:92:80:cc:fe:62:
49:0c:a3:3d:74:b1:b8:12:2b:ee:f7:06:a9:7e:d3:
00:b0:a1:3d:31:42:6f:c0:b1:ed:e8:29:ce:2d:12:
83:62:d6:52:c7:84:25:29:34:e9:0c:5a:8e:19:ef:
bb:46:19:6c:55:e2:49:b3:52:57:24:74:63:07:1f:
b7:94:b4:ad:0f:66:5b:f3:51:50:11:0a:8c:43:da:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:65:56:FD:1C:87:C0:0F:AD:06:5A:49:C5:D2:AB:D6:88:FE:39:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CE4C21A529D11F18D46C3C192833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:5ea0::/32
Signature Algorithm: sha256WithRSAEncryption
ac:3c:dc:61:cb:90:59:0f:07:16:0b:bf:dc:f0:af:ca:dc:d9:
b0:e5:0a:33:7d:bc:e3:fe:72:eb:39:de:91:9c:7c:6b:c3:02:
43:e6:9e:0d:ae:89:0d:68:64:f0:ad:b7:7d:3e:e5:f6:d1:6e:
31:77:84:c1:89:37:b8:2d:02:8f:a1:e1:35:3b:16:17:a7:a0:
54:8f:03:12:9d:f3:08:0e:e1:6b:57:8a:17:04:48:4f:d9:b7:
e5:73:06:f3:d1:eb:e1:b6:37:7d:85:3e:4d:2f:96:3f:97:45:
2f:29:59:58:a4:16:89:a3:cb:b7:ee:93:0f:6e:cf:31:0d:af:
59:64:f7:f0:c5:92:f9:c2:c1:1a:76:0a:af:5f:7c:66:12:4c:
bc:0a:f5:22:4a:b9:c5:df:4e:67:e8:02:d0:13:d3:5c:ce:69:
51:8e:85:d0:27:69:cc:80:d9:c9:a0:56:39:7e:ec:9f:56:cc:
52:08:76:6f:af:16:1a:8f:09:cb:9a:9b:08:63:ed:96:27:5a:
1c:83:1d:1b:07:0c:69:a1:a3:7b:aa:00:35:fc:d5:5b:65:a2:
c1:a9:ac:35:8f:23:28:03:5b:83:ac:c3:07:f5:dc:51:6c:0e:
6d:1b:d7:5a:c8:d1:ec:41:8c:76:a4:13:d4:4c:c1:51:f1:85:
5a:a2:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:16 2026 by rpki-client